Privacy Policy
1. About This Policy
Immaculate Therapy (‘we’, ‘us’, ‘our’) is committed to protecting the privacy, dignity, and confidentiality of every person we support. This Privacy Policy explains how we collect, use, store, and disclose personal and health information.
We comply with:
- The Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs)
- The NDIS Act 2013 and the NDIS Privacy Rule
- The NDIS Practice Standards, including the Rights and Responsibilities Standard and the Support Provision Standards
- APP 3 and APP 6 regarding the collection and use of sensitive (health) information
2. Who We Are
Immaculate Therapy is an NDIS-registered allied health practice based in Adelaide, South Australia. We provide positive behaviour support, counselling, clinical supervision, and consulting services, primarily to NDIS participants and their families.
3. Information We Collect
Personal and contact information:
- Full name and date of birth
- Phone number, email address, and postal address
- Emergency contact details
Health and disability information:
- Disability diagnosis, functional assessments, and behaviour support plans
- Mental health history and current treatment information
- Information submitted via referral, EOI, contact, or feedback forms
NDIS-related information:
- NDIS plan details, funding categories, and plan manager information
- Referral and support coordination information
Technical information:
- Website usage data, IP address, and device information (via cookies and analytics tools)
4. Consent to Share Information
We will only share your information with people and organisations you have specifically nominated on a signed Consent to Share form.
Before we share any of your information with any third party, we require:
- A completed and signed Consent to Share form, nominating the specific organisations, services, or individuals you authorise us to share with
- Documented proof of your consent, retained on your file
- Verbal or written confirmation directly with you (the participant, or their authorised representative) immediately prior to any disclosure
We will NEVER share your information with any organisation, service, support worker, family member, carer, or stakeholder that you have not specifically nominated on your Consent to Share form — regardless of their relationship to you.
If you wish to withdraw or update your consent at any time, please contact us. Withdrawing consent will not affect services already delivered.
5. How We Use Your Information
We use your information only to:
- Deliver and coordinate the support services you have requested
- Communicate with you, your nominated representatives, and authorised referrers
- Process invoices and manage NDIS billing
- Meet mandatory reporting obligations under the NDIS Act
- Improve our services in line with the NDIS Practice Standards
- Comply with legal, professional, and regulatory obligations
6. Disclosure of Information
Subject to your Consent to Share form, we may share your information with:
- Organisations and individuals you have specifically nominated on your signed Consent to Share form
- The NDIS Quality and Safeguards Commission, where mandatory reporting obligations apply
- Other treating practitioners or support coordinators — only where you have provided written consent
- Secure third-party technology providers (e.g. website host, telehealth platform) under strict confidentiality agreements
We will never sell, rent, or trade your personal information.
In the rare circumstance that we are legally required to disclose information without your consent (e.g. a court order or mandatory NDIS reporting), we will inform you as soon as reasonably practicable unless prohibited by law.
7. Storage and Security
Our security measures include:
- Password protection on all systems and devices used to store participant information
- Two-factor authentication (2FA) required for access to all systems containing personal or health data
- Encrypted and secure digital storage
- Access restricted to authorised Immaculate Therapy staff only
- Physical documents stored securely with controlled access
Health records are retained in accordance with applicable professional and legal standards. When no longer required, records are disposed of securely.
8. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request corrections to information that is inaccurate, incomplete, or out of date
- Withdraw or update your consent to share at any time
- Lodge a complaint about how we have handled your information
To exercise these rights, contact us via immaculatetherapy.com.au
If you are unsatisfied with our response, you may escalate to:
- Office of the Australian Information Commissioner (OAIC): 1300 363 992 | www.oaic.gov.au
- NDIS Quality and Safeguards Commission: 1800 035 544 | www.ndiscommission.gov.au
9. Cookies and Website Analytics
Our website may use cookies and analytics tools. No identifiable participant health information is collected through these tools. You may disable cookies in your browser settings.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on our website. Where changes are significant, we will notify current clients directly.
11. Contact Us
Privacy enquiries: immaculatetherapy.com.au
OAIC: 1300 363 992 | www.oaic.gov.au
NDIS Commission: 1800 035 544 | www.ndiscommission.gov.au